vitest
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands, specifically
nlx vitest runand other repository-owned runner scripts, to verify test results. This is a standard functional requirement for a testing skill. - [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes untrusted content from the repository, such as source code and test files, which could contain malicious instructions aimed at influencing the agent's behavior.
- Ingestion points: The agent reads and analyzes repository-owned source code, test files, and configuration files (e.g.,
vitest.config.ts). - Boundary markers: The instructions do not mandate the use of delimiters or safety wrappers when the agent processes or interpolates external code into its context.
- Capability inventory: The skill relies on shell command execution (Vitest runner) and file system access to perform its core tasks.
- Sanitization: There are no explicit instructions for sanitizing or validating the content of the files being processed before execution or analysis.
Audit Metadata